author | Alberto Bertogli
<albertito@blitiri.com.ar> 2025-06-09 09:28:10 UTC |
committer | Alberto Bertogli
<albertito@blitiri.com.ar> 2025-06-09 09:28:10 UTC |
parent | e74a381220a61b6a83b02096f056915803b4b5a8 |
.github/workflows/govulncheck.yaml | +27 | -0 |
.gitignore | +1 | -0 |
diff --git a/.github/workflows/govulncheck.yaml b/.github/workflows/govulncheck.yaml new file mode 100644 index 0000000..65fcc0b --- /dev/null +++ b/.github/workflows/govulncheck.yaml @@ -0,0 +1,27 @@ +name: "govulncheck" + +on: + push: + branches: [ "main", "next" ] + pull_request: + # The branches below must be a subset of the branches above + branches: [ "main", "next" ] + schedule: + - cron: '29 02 * * 6' + +jobs: + govulncheck: + runs-on: ubuntu-latest + timeout-minutes: 5 + name: Run govulncheck + steps: + - id: govulncheck + uses: golang/govulncheck-action@v1 + with: + # Use the latest available Go version, and disable the cache + # (because it often interferes with finding it). + # This helps reduce false positives when there are security issues + # in the Go distribution itself. + go-version-input: 'stable' + check-latest: true + cache: false diff --git a/.gitignore b/.gitignore index 50f3de5..f657ab6 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,4 @@ .* !.gitignore +!.github/ firstones